curl / Docs / Vulnerability table / 5.8 vulnerabilities

Vulnerabilities in curl 5.8

Related:
Audits
Changelog
curl CVEs
Vulnerability Disclosure
Vulnerabilities Table

curl version 5.8 was released on May 5 1999

It has the following 13 published security problems.

S	Flaw	First	Last
L	CVE-2022-35252: control code in cookie denial of service	4.9	7.84.0
L	CVE-2022-27776: Auth/cookie leak on redirect	4.9	7.82.0
M	CVE-2022-27774: Credential leak on redirect	4.9	7.82.0
L	CVE-2020-8284: trusting FTP PASV responses	4.0	7.73.0
M	CVE-2016-9586: printf floating point buffer overflow	5.4	7.51.0
H	CVE-2016-8615: cookie injection for other servers	4.9	7.50.3
M	CVE-2016-8618: double free in curl_maprintf	5.4	7.50.3
H	CVE-2016-5419: TLS session resumption client cert bypass	5.0	7.50.0
H	CVE-2016-0754: remote filename path traversal in curl tool for Windows	4.0	7.46.0
H	CVE-2015-3153: sensitive HTTP server headers also sent to proxies	4.0	7.42.0
M	CVE-2014-3613: cookie leak with IP address as domain	4.0	7.37.1
H	CVE-2013-1944: cookie domain tailmatch	4.7	7.29.0
H	CVE-2003-1605: Proxy Authentication Header Information Leakage	4.5	7.10.6

Further details

CVE data for 5.8 provided as JSON.

Changelog for curl 5.8

See vulnerability summary for the previous release: 5.7.1 or the subsequent release: 5.9